/[winpt]/trunk/Src/wptPassphraseCB.cpp
ViewVC logotype

Contents of /trunk/Src/wptPassphraseCB.cpp

Parent Directory Parent Directory | Revision Log Revision Log


Revision 229 - (show annotations)
Mon Jun 19 14:04:31 2006 UTC (18 years, 8 months ago) by twoaday
File size: 14242 byte(s)


1 /* wptPassphraseCB.cpp - GPGME Passphrase Callback
2 * Copyright (C) 2001, 2002, 2003, 2005, 2006 Timo Schulz
3 * Copyright (C) 2005 g10 Code GmbH
4 *
5 * This file is part of WinPT.
6 *
7 * WinPT is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU General Public License
9 * as published by the Free Software Foundation; either version 2
10 * of the License, or (at your option) any later version.
11 *
12 * WinPT is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 * General Public License for more details.
16 *
17 * You should have received a copy of the GNU General Public License
18 * along with WinPT; if not, write to the Free Software Foundation,
19 * Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
20 */
21
22 #ifdef HAVE_CONFIG_H
23 #include <config.h>
24 #endif
25
26 #include <windows.h>
27 #include <ctype.h>
28
29 #include "resource.h"
30 #include "wptNLS.h"
31 #include "wptW32API.h"
32 #include "wptVersion.h"
33 #include "wptGPG.h"
34 #include "wptCommonCtl.h"
35 #include "wptContext.h"
36 #include "wptDlgs.h"
37 #include "wptErrors.h"
38 #include "wptTypes.h"
39 #include "wptKeylist.h"
40 #include "wptAgent.h"
41 #include "wptRegistry.h"
42 #include "wptUTF8.h"
43
44 const char* get_symkey_algo (int algo);
45
46 #define item_ctrl_id(cmd) \
47 ((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_PWD : IDC_DECRYPT_SIGN_PWD)
48
49 #define item_ctrl_id2(cmd) \
50 ((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_HIDE : IDC_DECRYPT_SIGN_HIDE)
51
52
53 void ListBox_AddString_utf8 (HWND lb, const char *txt);
54
55 /* Overwrite passphrase and free memory. */
56 static void
57 burn_passphrase (char **pwd)
58 {
59 char *pass = *pwd;
60 wipememory (pass, strlen (pass));
61 delete []pass;
62 *pwd = NULL;
63 }
64
65
66 /* Dialog procedure for the passphrase callback. */
67 static BOOL CALLBACK
68 passphrase_callback_proc (HWND dlg, UINT msg, WPARAM wparam, LPARAM lparam)
69 {
70 static passphrase_cb_s *c;
71 gpgme_decrypt_result_t res=NULL;
72 gpgme_sign_result_t res_sig=NULL;
73 gpgme_recipient_t recip=NULL, r;
74 winpt_key_s key;
75 void *item;
76 const char *id;
77 char *info;
78 int n;
79
80 switch (msg) {
81 case WM_ACTIVATE:
82 safe_edit_control_init (dlg, item_ctrl_id (c->gpg_cmd));
83 break;
84
85 case WM_DESTROY:
86 safe_edit_control_free (dlg, item_ctrl_id (c->gpg_cmd));
87 break;
88
89 case WM_INITDIALOG:
90 c = (passphrase_cb_s *)lparam;
91 if (!c)
92 BUG (0);
93 SetDlgItemText (dlg, IDCANCEL, _("&Cancel"));
94 SetWindowText (dlg, c->title);
95 if (c->gpg_cmd == GPG_CMD_DECRYPT) {
96 SetDlgItemText (dlg, IDC_DECRYPT_HIDE, _("&Hide Typing"));
97 SetDlgItemText (dlg, IDC_DECRYPT_LISTINF,
98 _("Encrypted with the following public key(s)"));
99 CheckDlgButton (dlg, IDC_DECRYPT_HIDE, BST_CHECKED);
100 }
101 else if (c->gpg_cmd == GPG_CMD_SIGN) {
102 SetDlgItemText (dlg, IDC_DECRYPT_SIGN_HIDE, _("&Hide Typing"));
103 CheckDlgButton (dlg, IDC_DECRYPT_SIGN_HIDE, BST_CHECKED);
104 }
105 /* Because it depends on the order the keys are stored in the
106 keyring whether res->recipients is complete or not, we also
107 support that the recipients were externally extracted and then
108 we use this list. */
109 if (c->recipients)
110 recip = c->recipients; /* recipients were already extracted. */
111 else {
112 res = gpgme_op_decrypt_result (c->gpg);
113 if (res && res->recipients)
114 recip = res->recipients;
115 }
116 if (recip != NULL && c->gpg_cmd == GPG_CMD_DECRYPT) {
117 for (r = recip; r; r = r->next) {
118 memset (&key, 0, sizeof (key));
119 if (!winpt_get_pubkey (r->keyid, &key)) {
120 gpgme_user_id_t u = key.ctx->uids;
121
122 id = u->name;
123 if (!id)
124 id = _("Invalid User ID");
125 n = 32+strlen (id)+1+4+strlen (r->keyid)+1;
126 if (u->email)
127 n += strlen (u->email)+1;
128 info = new char [n+1];
129 if (!info)
130 BUG (NULL);
131 if (!u->email || strlen (u->email) < 1)
132 sprintf (info, "%s (%s, 0x%s)", id,
133 get_key_pubalgo (r->pubkey_algo), r->keyid+8);
134 else
135 sprintf (info, "%s <%s> (%s, 0x%s)", id, u->email,
136 get_key_pubalgo (r->pubkey_algo), r->keyid+8);
137 }
138 else {
139 info = new char [32 + strlen (r->keyid)+1 + 4];
140 if (!info)
141 BUG (NULL);
142 sprintf (info, _("Unknown key ID (%s, 0x%s)"),
143 get_key_pubalgo (r->pubkey_algo), r->keyid+8);
144 }
145 ListBox_AddString_utf8 (GetDlgItem (dlg, IDC_DECRYPT_LIST), info);
146 free_if_alloc (info);
147 winpt_release_pubkey (&key);
148 }
149 }
150 else if (c->gpg_cmd == GPG_CMD_DECRYPT)
151 EnableWindow (GetDlgItem (dlg, IDC_DECRYPT_LIST), FALSE);
152 SetDlgItemText (dlg, c->gpg_cmd == GPG_CMD_DECRYPT?
153 IDC_DECRYPT_PWDINFO : IDC_DECRYPT_SIGN_PWDINFO,
154 c->bad_pwd? _("Bad passphrase; Enter passphrase again") :
155 _("Please enter your passphrase"));
156 if (c->gpg_cmd == GPG_CMD_DECRYPT) {
157 SetFocus (GetDlgItem (dlg, IDC_DECRYPT_PWD));
158 if (res && !res->recipients) {
159 const char *s = _("Symmetric encryption.\n"
160 "%s encrypted data.");
161 const char *alg = get_symkey_algo (c->sym.sym_algo);
162 info = new char[strlen (s) + strlen (alg) + 2];
163 if (!info)
164 BUG (NULL);
165 sprintf (info, s, alg);
166 SetDlgItemText (dlg, IDC_DECRYPT_MSG, info);
167 free_if_alloc (info);
168 }
169 else
170 SetDlgItemText (dlg, IDC_DECRYPT_MSG, c->info);
171 }
172 else {
173 SetFocus (GetDlgItem (dlg, IDC_DECRYPT_SIGN_PWD));
174 SetDlgItemText (dlg, IDC_DECRYPT_SIGN_MSG, c->info);
175 }
176 center_window (dlg, NULL);
177 SetForegroundWindow (dlg);
178 return FALSE;
179
180 case WM_SYSCOMMAND:
181 if (LOWORD (wparam) == SC_CLOSE) {
182 SetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), "");
183 c->cancel = 1;
184 EndDialog (dlg, TRUE);
185 }
186 break;
187
188 case WM_COMMAND:
189 switch (HIWORD (wparam)) {
190 case BN_CLICKED:
191 if (LOWORD (wparam) == IDC_DECRYPT_HIDE
192 || LOWORD (wparam) == IDC_DECRYPT_SIGN_HIDE) {
193 HWND hwnd;
194 int hide = IsDlgButtonChecked (dlg, item_ctrl_id2 (c->gpg_cmd));
195 hwnd = GetDlgItem (dlg, item_ctrl_id (c->gpg_cmd));
196 SendMessage (hwnd, EM_SETPASSWORDCHAR, hide? '*' : 0, 0);
197 SetFocus (hwnd);
198 }
199 }
200
201 switch (LOWORD (wparam)) {
202 case IDOK:
203 /* XXX: the item is even cached when the passphrase is not
204 correct, which means that the user needs to delete all
205 cached entries to continue. */
206 if (c->pwd)
207 burn_passphrase (&c->pwd);
208 n = item_get_text_length (dlg, item_ctrl_id (c->gpg_cmd));
209 if (!n) {
210 c->pwd = new char[2];
211 if (!c->pwd)
212 BUG (NULL);
213 strcpy (c->pwd, "");
214 }
215 else {
216 char *p = new char[n+2];
217 if (!p)
218 BUG (NULL);
219 /* Get the passphrase and convert it utf8.
220 This does not just the us-ascii charset. */
221 SafeGetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), p, n+1);
222 c->pwd = native_to_utf8 (p);
223 sfree_if_alloc (p);
224 }
225 res = gpgme_op_decrypt_result (c->gpg);
226 if (!res)
227 res_sig = gpgme_op_sign_result (c->gpg);
228 if (reg_prefs.cache_time > 0 && !c->is_card &&
229 (res || res_sig)) {
230 if (agent_get_cache (c->keyid, &item))
231 agent_unlock_cache_entry (&item);
232 else
233 agent_put_cache (c->keyid, c->pwd, reg_prefs.cache_time);
234 }
235 c->cancel = 0;
236 EndDialog (dlg, TRUE);
237 return TRUE;
238
239 case IDCANCEL:
240 SetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), "");
241 c->cancel = 1;
242 EndDialog (dlg, FALSE);
243 return FALSE;
244 }
245 break;
246 }
247
248 return FALSE;
249 }
250
251
252 /* Extract the main keyid from @pass_info.
253 Return value: long main keyid or NULL for an error. */
254 static const char*
255 parse_gpg_keyid (const char *pass_info)
256 {
257 static char keyid[16+1];
258
259 /* XXX: check for leading alpha-chars? */
260 if (strlen (pass_info) < 16) {
261 log_debug ("parse_gpg_keyid: error '%s'\r\n", pass_info);
262 return NULL;
263 }
264 /* the format of the desc buffer looks like this:
265 request_keyid[16] main_keyid[16] keytype[1] keylength[4]
266 we use the main keyid to use only one cache entry. */
267 strncpy (keyid, pass_info+17, 16);
268 keyid[16] = 0;
269 return keyid;
270 }
271
272
273 /* Parse the information in @uid_hint and @pass_info to generate
274 a input message for the user in @desc. */
275 static int
276 parse_gpg_description (const char *uid_hint, const char *pass_info,
277 char *desc, int size)
278 {
279 gpgme_pubkey_algo_t algo;
280 char usedkey[16+1];
281 char mainkey[16+1];
282 char *p, *uid;
283 int n=0;
284
285 algo = (gpgme_pubkey_algo_t)0;
286 /* Each uid_hint contains a long key-ID so it is at least 16 bytes. */
287 if (strlen (uid_hint) < 17) {
288 *desc = 0;
289 log_debug ("parse_gpg_description: error '%s'\r\n", uid_hint);
290 return -1;
291 }
292
293 while (p = strsep ((char**)&pass_info, " ")) {
294 switch (n++) {
295 case 0: strncpy (mainkey, p, 16); mainkey[16] = 0; break;
296 case 1: strncpy (usedkey, p, 16); usedkey[16] = 0; break;
297 case 2: algo = (gpgme_pubkey_algo_t)atol (p); break;
298 }
299 }
300 uid_hint += 16; /* skip keyid */
301 uid_hint += 1; /* space */
302
303 uid = utf8_to_native (uid_hint);
304 if (strcmp (usedkey, mainkey))
305 _snprintf (desc, size-1,
306 _("You need a passphrase to unlock the secret key for\n"
307 "user: \"%s\"\n"
308 "%s key, ID %s (main key ID %s)\n"),
309 uid, get_key_pubalgo (algo), usedkey+8, mainkey+8);
310 else if (!strcmp (usedkey, mainkey))
311 _snprintf (desc, size-1,
312 _("You need a passphrase to unlock the secret key for\n"
313 "user: \"%s\"\n"
314 "%s key, ID %s\n"),
315 uid, get_key_pubalgo (algo), usedkey+8);
316 safe_free (uid);
317 return 0;
318 }
319
320
321 /* Extract the serial number from the card ID @id and return it. */
322 const char*
323 extract_serial_no (const char *id)
324 {
325 static char buf[8];
326 char *p;
327
328 p = strchr (id, '/');
329 if (!p) {
330 log_debug ("extract_serial_no: error '%s'\r\n", id);
331 return NULL;
332 }
333 strncpy (buf, id+(p-id)-6, 6);
334 return buf;
335 }
336
337
338 /* Passphrase callback with the ability to support caching. */
339 gpgme_error_t
340 passphrase_cb (void *hook, const char *uid_hint,
341 const char *passphrase_info,
342 int prev_was_bad, int fd)
343 {
344 passphrase_cb_s *c = (passphrase_cb_s*)hook;
345 HANDLE hd = (HANDLE)fd;
346 void *item;
347 const char *keyid=NULL, *pass;
348 DWORD n;
349 int rc = 0;
350
351 if (!c) {
352 log_debug ("passphrase_cb: error '!c'\r\n");
353 return gpg_error (GPG_ERR_INV_ARG);
354 }
355 c->bad_pwd = prev_was_bad? 1 : 0;
356 if (prev_was_bad && !c->cancel) {
357 if (c->pwd)
358 burn_passphrase (&c->pwd);
359 agent_del_cache (c->keyid);
360 c->pwd_init = 1;
361 }
362
363 if (passphrase_info) {
364 if (strlen (passphrase_info) < 16 &&
365 !strstr (passphrase_info, "OPENPGP")) {
366 /* assume symetric encryption. */
367 int pos=2;
368 c->sym.sym_algo = atoi (passphrase_info);
369 if (c->sym.sym_algo > 9)
370 pos++;
371 /* XXX: be more strict. */
372 c->sym.s2k_mode = atoi (passphrase_info+pos);
373 c->sym.s2k_hash = atoi (passphrase_info+pos+2);
374 }
375
376 keyid = parse_gpg_keyid (passphrase_info);
377 pass = agent_get_cache (keyid+8, &item);
378 if (pass) {
379 agent_unlock_cache_entry (&item);
380 c->pwd_init = 0;
381 if (!WriteFile (hd, pass, strlen (pass), &n, NULL))
382 log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
383 if (!WriteFile (hd, "\n", 1, &n, NULL))
384 log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
385 return 0;
386 }
387 }
388
389 if (c->pwd_init) {
390 if (keyid && strlen (keyid) == 16)
391 strcpy (c->keyid, keyid+8);
392
393 /* if @passphrase_info contains 'OPENPGP' we assume a smart card
394 has been used. */
395 if (strstr (passphrase_info, "OPENPGP")) {
396 const char *s=passphrase_info;
397 while (s && *s && *s != 'D')
398 s++;
399 _snprintf (c->info, sizeof c->info-1,
400 _("Please enter the PIN to unlock your secret card key\n"
401 "Card: %s"), extract_serial_no (s));
402 c->is_card = 1;
403 }
404 else if (uid_hint)
405 parse_gpg_description (uid_hint, passphrase_info,
406 c->info, sizeof (c->info) - 1);
407 if (c->gpg_cmd == GPG_CMD_DECRYPT) {
408 rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT,
409 (HWND)c->hwnd, passphrase_callback_proc,
410 (LPARAM)c);
411 }
412 else if (c->gpg_cmd == GPG_CMD_SIGN) {
413 rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT_SIGN,
414 (HWND)c->hwnd, passphrase_callback_proc,
415 (LPARAM)c);
416 }
417 if (rc == -1) {
418 if (!WriteFile (hd, "\n", 1, &n, NULL))
419 log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
420 return 0;
421 }
422 c->pwd_init = 0;
423 }
424 if (c->cancel || !c->pwd) {
425 if (!WriteFile (hd, "\n", 1, &n, NULL))
426 log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
427 return 0;
428 }
429
430 if (!WriteFile (hd, c->pwd, strlen (c->pwd), &n, NULL))
431 log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
432 if (!WriteFile (hd, "\n", 1, &n, NULL))
433 log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
434 return 0;
435 }
436
437
438 /* Initialize the given passphrase callback @cb with the
439 used gpgme context @ctx, the command @cmd and a title
440 @title for the dialog. */
441 void
442 set_gpg_passphrase_cb (passphrase_cb_s *cb, gpgme_ctx_t ctx,
443 int cmd, HWND hwnd, const char *title)
444 {
445 memset (cb, 0, sizeof *cb);
446 cb->gpg_cmd = cmd;
447 cb->bad_pwd = 0;
448 cb->is_card = 0;
449 cb->cancel = 0;
450 cb->hwnd = hwnd;
451 cb->pwd_init = 1;
452 free_if_alloc (cb->title);
453 cb->title = m_strdup (title);
454 gpgme_set_passphrase_cb (ctx, passphrase_cb, cb);
455 cb->gpg = ctx;
456 }
457
458
459 /* Release the gpg recipient list. */
460 void
461 release_gpg_recipients (gpgme_recipient_t *recipients)
462 {
463 gpgme_recipient_t r, n;
464
465 r = *recipients;
466 while (r != NULL) {
467 n = r->next;
468 safe_free (r->keyid);
469 safe_free (r);
470 r = n;
471 }
472 *recipients = NULL;
473 }
474
475
476
477 /* Release a passphrase callback @ctx. */
478 void
479 release_gpg_passphrase_cb (passphrase_cb_s *ctx)
480 {
481 if (!ctx)
482 return;
483 sfree_if_alloc (ctx->pwd);
484 free_if_alloc (ctx->title);
485 release_gpg_recipients (&ctx->recipients);
486 }
487
488
489 /* Simple check to measure passphrase (@pass) quality.
490 Return value: 0 on success. */
491 int
492 check_passwd_quality (const char *pass, int strict)
493 {
494 int i, nd=0, nc=0, n;
495
496 n = strlen (pass);
497 if (n < 8)
498 return -1;
499
500 for (i=0; i < n; i++) {
501 if (isdigit (pass[i]))
502 nd++;
503 if (isalpha (pass[i]))
504 nc++;
505 }
506
507 /* check that the passphrase contains letters and numbers. */
508 if (nd == n || nc == n)
509 return -1;
510
511 return 0;
512 }

Properties

Name Value
svn:eol-style native

[email protected]
ViewVC Help
Powered by ViewVC 1.1.26